Privacy Policy for Passport Photo
Last updated: 7 August 2026
Steradian Labs ("we", "us") makes the Passport Photo iPhone app. This policy explains what the app collects, what it does not, and who else ever sees it.
The short version: your photographs never leave your iPhone. There are no ads, no tracking across other companies' apps or websites, and nothing is sold to anyone. What little we do collect can be deleted from inside the app in one tap.
1. Your photographs
Every photo you take or import is processed entirely on your device. Detecting your face, finding the top of your head, measuring head height and eye position, cropping, scaling and saving the final file all happen on the iPhone itself, using Apple's on-device Vision framework.
We never receive:
- your photographs, or any crop or version of one
- any measurement taken from your face
- any face data, landmarks, or biometric template of any kind
There is no upload, and nowhere for one to go. Our database has no table that could hold an image, so this holds because of how the app is built rather than because of how we choose to behave.
Photos you save go to your own Photos library or Files, under your control. Deleting the app removes anything it kept on the device.
2. What we collect
| What | Why |
|---|---|
| An anonymous ID | A random value created on your device on first launch. It is the whole of your "account" and it is what makes deletion possible. |
| Usage events | Which documents are opened, which rules pass or fail, whether an export happened. Labels and counts only. |
| Error reports | A message and where in the app it happened, so faults on devices we do not own can be found and fixed. |
| Feedback | Only what you type into the feedback box, and only if you use it. |
| Push token | Only if you turn on the Green Card Lottery alert. |
| Purchase status | Apple tells us the app was bought. Apple handles the payment. |
Usage events never contain a photograph, a measurement, or anything derived from a face.
3. What we do not collect
- No name, email address, phone number or password. There is no login.
- No precise location.
- No contacts, calendar or health data.
- No advertising identifier (IDFA), and no tracking of any kind.
- No biometric data.
- No payment card details. Apple processes the purchase and we never see them.
The anonymous ID is a random value. It is not connected to your real-world identity.
4. How we use it
- To run the app and deliver the Green Card Lottery alert if you asked for it.
- To understand which documents and features are actually used, so the right ones get improved.
- To find and fix errors.
- To read and act on feedback you send us.
5. Artificial intelligence
The app does not send your data to any AI service. No photograph, measurement, or piece of text you type is transmitted to OpenAI, Google, Anthropic, or any other provider. The face detection the app performs runs on your device using Apple's own frameworks, and nothing it produces is uploaded.
6. Who else processes your data
Three service providers, each acting only as a processor on our instructions and none of them permitted to use your data for their own purposes:
- Railway (Railway Corp., USA) hosts the application server.
- Supabase (Supabase Inc., USA) hosts the database.
- Apple processes your purchase and delivers push notifications.
We do not sell, rent or share your data for advertising. We would disclose data only if required by law, and we would look for a way to tell you first unless prohibited.
7. How long we keep it
Usage and error events are kept for up to 24 months, then deleted. Feedback is kept until you delete your data or ask us to remove it. Push tokens are removed when you turn the alert off or delete the app.
8. Deleting your data
Open Settings in the app and tap Delete my data. That removes your anonymous ID, your usage and error events, your feedback and your push token. It is immediate and cannot be undone. You can also email us.
Deleting the app stops all collection. Because your photos are never sent to us, there is nothing of yours to delete on our side beyond the items above.
9. Your rights and choices
You may have the right to access, correct, delete or export your data, and to object to its processing. The in-app Delete my data control carries out a deletion immediately, with no need to contact anyone. For anything else, email us and we will respond within 30 days.
You can turn the Green Card Lottery alert off at any time in Settings, or in iOS Settings under Notifications.
10. California (CCPA and CPRA)
If you are a California resident:
- We do not sell your personal information, and never have.
- We do not share it for cross-context behavioural advertising. There are no ad networks and no advertising identifiers in this app.
- You have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights.
- We honour the Global Privacy Control signal.
In CCPA terms the categories we collect are identifiers (an anonymous ID) and internet or other electronic network activity (which screens were opened). We collect no category of sensitive personal information.
11. Europe, the EEA and the UK (GDPR and UK GDPR)
Steradian Labs is the data controller. Your rights include access, rectification, erasure, restriction, portability, objection, and lodging a complaint with your supervisory authority.
| Purpose | Lawful basis |
|---|---|
| Running the app and fixing faults | Legitimate interest |
| Understanding which features are used | Legitimate interest |
| Green Card Lottery alert | Consent, withdrawable at any time |
| Responding to your feedback | Legitimate interest |
Because there is no login and no photograph ever reaches us, the data we hold about any individual is limited to an anonymous ID and a record of app activity.
12. Security
Data in transit is encrypted with TLS. The database is not reachable from the app or from the public internet: row-level security is enabled on every table with no policies, so only our server's credential can read or write it, and that credential is never shipped inside the app.
Your photographs are the most sensitive thing this app touches, and they are never transmitted, so there is no server-side risk to them at all.
13. International transfers
We are based in the United States and our processors store data there. If you use the app from the EEA or the UK, the limited data described in section 2 is transferred to the United States. We rely on the European Commission's Standard Contractual Clauses with our processors for those transfers.
14. Children
The app is not directed at children under 13 and we do not knowingly collect their data. An adult may use the app to make a passport photo of a child. That photograph is processed on the device like any other and is never transmitted.
15. Changes to this policy
If this policy changes materially we will update the date at the top and note the change in the app's release notes.
16. Contact
Steradian Labs, support@steradianlabs.com